================================================================ INFOSECFOLLOW -- security, markets, business, pittsburgh Friday, July 10, 2026 - 4:07 PM EDT ================================================================ Progress Software ordered ShareFile customers to power down their file-sharing servers over a credible active threat, as U.S. courts convicted a Ryuk operator and a Gitea flaw fell under live exploitation. CONTENTS: Emerging Trends and Key Updates | Security | Business and Politics | Pittsburgh | Sports | Reading | Markets EMERGING TRENDS AND KEY UPDATES ---------------------------------------------------------------- * [TREND] Researchers keep turning AI against its own makers, demonstrating HalluSquatting by registering the fake package names coding assistants hallucinate to deliver remote code execution. see: HalluSquatting Weaponizes AI Hallucinations * [TREND] Enterprise file-sharing and code infrastructure are in the crosshairs as Progress orders an emergency ShareFile shutdown while attackers actively exploit a Gitea Docker auth-bypass. see: Progress ShareFile Emergency Shutdown; Web and Firmware Flaws Under Active Attack * [TREND] Courtroom losses are thinning ransomware's ranks, from an Armenian Ryuk operator's guilty plea in Oregon to a DigitalMint negotiator's sentencing the same day in Florida. see: Ransomware Operators Face U.S. Prison * [UPDATE (new)] On July 10 lawmakers moved on two fronts as the European Parliament passed Chat Control message scanning and U.S. senators struck a deal to tighten Russia sanctions. see: EU Revives Chat Control CSAM Scanning; Senate Deal Tightens Russia Sanctions * [UPDATE (new)] SentinelOne found Chinese and Indian state-linked hackers separately spying on Pakistan's Balochistan Police, in some cases breaching the exact same systems. see: China and India Both Spy on Balochistan Police SECURITY ---------------------------------------------------------------- 1. WEB AND FIRMWARE FLAWS UNDER ACTIVE ATTACK Vulnerabilities and Exploits · [exploit, patch] Latest developments: Attackers began actively exploiting a critical auth-bypass in the official Gitea Docker image that lets them impersonate any user, including administrators, while CISA added actively exploited iCagenda (CVE-2026-48939) and Balbooa Forms (CVE-2026-56291) file-upload flaws to its catalog, Zimbra urged customers to patch a critical Classic Web Client XSS bug, and Binarly disclosed six new U-Boot bootloader flaws. The bugs span self-hosted Git servers, Joomla extensions, the Zimbra mail suite, and the U-Boot bootloader embedded in routers, cameras, and data-center management chips. Administrators should patch or isolate the affected systems now. - BleepingComputer: https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-auth-bypass-in-gitea-docker-image/ - CISA Advisories: https://www.cisa.gov/news-events/alerts/2026/07/10/cisa-adds-two-known-exploited-vulnerabilities-catalog - BleepingComputer: https://www.bleepingcomputer.com/news/security/zimbra-urges-customers-to-patch-critical-web-client-xss-flaw/ - The Hacker News: https://thehackernews.com/2026/07/six-new-u-boot-flaws-could-let.html 2. RANSOMWARE OPERATORS FACE U.S. PRISON Ransomware and Cybercrime · [ransomware, arrest] Latest developments: A 34-year-old Armenian man pleaded guilty in Oregon federal court to conspiracy and computer fraud for deploying Ryuk ransomware against U.S. companies and faces up to 15 years, the same day a Florida court sentenced former DigitalMint negotiator Angelo Martino, 41, to 70 months for aiding BlackCat/ALPHV extortion. Ryuk has encrypted hospitals and businesses for large ransoms since 2018; BlackCat/ALPHV ran a ransomware-as-a-service operation dismantled in 2023. U.S. courts are steadily convicting both operators and the insider negotiators who helped them. - BleepingComputer: https://www.bleepingcomputer.com/news/security/ryuk-ransomware-member-pleads-guilty-in-the-us-faces-15-years-in-prison/ - The Record: https://therecord.media/ryuk-operator-pleads-guilty-alphv-conspirator-sentenced - SecurityWeek: https://www.securityweek.com/third-us-security-expert-sentenced-to-prison-for-helping-ransomware-gang/ 3. PROGRESS SHAREFILE EMERGENCY SHUTDOWN Vulnerabilities and Exploits · [zero-day, patch] Latest developments: Progress Software emailed ShareFile customers on July 10 to immediately shut down the Windows servers running their Storage Zone Controllers, citing a credible external security threat, and temporarily disabled access to affected accounts while it investigates. ShareFile is Progress Software's enterprise secure file-sharing platform; its on-premises Storage Zone Controllers run on Windows servers. Customers should power the servers off and watch for a fix. - The Hacker News: https://thehackernews.com/2026/07/urgent-progress-tells-sharefile.html - BleepingComputer: https://www.bleepingcomputer.com/news/security/progress-urges-sharefile-customers-to-shut-down-servers-over-credible-threat/ 4. CHINA AND INDIA BOTH SPY ON BALOCHISTAN POLICE Nation-State Activity · [apt, breach] Latest developments: SentinelOne reported that Chinese and Indian state-linked hackers ran separate espionage campaigns against Pakistan's Balochistan Police between February 2024 and April 2026, in some cases breaching the exact same systems. The Balochistan Police guard Pakistan's southwestern province, site of a long-running separatist insurgency. Rival and allied governments alike targeted the force to harvest intelligence. - The Record: https://therecord.media/china-india-ran-separate-spy-campaigns-against-same-police-force - SecurityWeek: https://www.securityweek.com/china-india-linked-hackers-both-targeted-same-pakistani-police-force/ 5. HALLUSQUATTING WEAPONIZES AI HALLUCINATIONS AI Security · [ai, supply chain] Latest developments: Researchers demonstrated HalluSquatting, pre-registering the nonexistent package names that AI coding assistants routinely hallucinate, then serving malware from them to achieve remote code execution and seed a botnet. When a large language model suggests a library that does not exist, an attacker who has claimed that name delivers malicious code to anyone who follows the suggestion. Verify AI-suggested dependencies before installing them. - SecurityWeek: https://www.securityweek.com/hallusquatting-turns-ai-hallucinations-into-botnet-delivery-mechanism/ 6. EU REVIVES CHAT CONTROL CSAM SCANNING Policy and Regulation · [policy, privacy] Latest developments: The European Parliament passed Chat Control 2.0 on July 10, letting companies including Google, Meta, and Microsoft scan users' messages to hunt for child sexual abuse material. The law revives a contested proposal to permit message scanning across the European Union, reigniting privacy fights over content inspection of private communications. - The Record: https://therecord.media/chat-control-2-csam-scans-european-parliament-passage BUSINESS AND POLITICS ---------------------------------------------------------------- * Senate Deal Tightens Russia Sanctions Latest developments: United States senators reached a deal with the White House on legislation to tighten sanctions on Russia, a potential breakthrough that landed days after Trump signaled a shift toward more support for Kyiv. The bipartisan Senate agreement clears a path to harsher measures against Moscow and its trading partners, and it coincides with Trump's turn toward backing Ukraine—a move that could squeeze Russian energy revenue and the banks and commodities traders exposed to it. - FT World: https://www.ft.com/content/54fba496-986c-44a0-99db-dfb8bb6fce23 PITTSBURGH ---------------------------------------------------------------- Weather: This Afternoon: Showers And Thunderstorms, high 85F. Tonight: Showers And Thunderstorms Likely, low 67F. Saturday: Areas Of Fog then Slight Chance Showers And Thunderstorms, high 85F. Business: * New Granada Revitalization Enters Phase Two Latest developments: Local and state leaders gathered July 10 to launch Phase Two of the New Granada revitalization in Pittsburgh's Hill District. The project restores the New Granada Theater, a Hill District landmark that Black Masons built nearly a century ago, part of a long push to revive the neighborhood's cultural core. - WPXI: https://www.wpxi.com/news/local/leaders-mark-start-next-phase-new-granada-revitalization-project-pittsburgh/3I34GEPQHBAJXDNCFKTRIBBASU/ * Best Places to Work in Western PA Named Latest developments: Organizers released the 2026 Best Places to Work in Western Pennsylvania list July 10. The annual program ranks Pittsburgh-region employers on workplace culture and employee satisfaction, with WPXI publishing the full 2026 honorees. - WPXI: https://www.wpxi.com/news/local/introducing-2026-best-places-work-western-pa/Y2OENVN6YZH3LA2CSBLLRRKW4U/ Around town: * Wilkinsburg Courts Detoured Drivers Latest developments: With the Parkway East closing tonight, the Wilkinsburg Community Development Corporation launched a 'Skip the Tunnel' campaign, plastering billboards to court the up to 100,000 motorists rerouted through the borough for 25 days. PennDOT's closure of the Parkway East between the Squirrel Hill Tunnel and the Edgewood/Swissvale exit to replace the Commercial Street Bridge funnels traffic through Wilkinsburg, and the borough's development corporation is pitching those detoured drivers on its vacant office space and businesses with the slogan 'Detour traffic is temporary, tunnel traffic is forever.' - TribLive: https://triblive.com/local/wilkinsburg-sees-chance-to-shine-during-commercial-street-bridge-disruption/ - KDKA: https://www.cbsnews.com/pittsburgh/news/wilkinsburg-billboards-try-to-attract-new-businesses-during-parkway-east-detour-tunnel-traffic-is-forever/ * Recording Captures CMU President's Trump Dilemma Latest developments: PublicSource published audio from a year-old Carnegie Mellon staff council meeting in which President Farnam Jahanian called the administration in Washington 'toxic.' In the recording, Jahanian described his efforts to shield Carnegie Mellon University, including a decision to paint The Fence, and characterized students as naive, as he weighed a controversial Trump visit to campus. - PublicSource: https://www.publicsource.org/cmu-president-trump-visit-recording/ * I-279 and HOV Lanes Close Overnight Next Week Latest developments: PennDOT will again close a portion of I-279 and the I-279/I-579 High Occupancy Vehicle lanes overnight next week in Allegheny County. The overnight restrictions layer more disruption onto a region already juggling detours from the 25-day Parkway East shutdown that begins tonight. - WPXI: https://www.wpxi.com/news/local/more-restrictions-closure-planned-i-279-hov-lanes-next-week/USOTXD25CJELRGHATH7A7JDFWU/ Events: * Wexford Garden and Pond Tour Returns Latest developments: The Wexford Garden and Pond Tour returns Saturday, July 11, after a three-year hiatus. On Saturday, July 11, Wexford homeowners open their yards for the self-guided tour, showing off koi ponds and pondless waterfalls to hundreds of visitors; organizer Debra Krischke promises past favorites and new surprises. - Pittsburgh Magazine: https://www.pittsburghmagazine.com/wexford-garden-and-pond-tour-returns-after-three-year-hiatus/ * Big Boy Steam Locomotive Stops in Leetsdale Latest developments: Union Pacific's Big Boy No. 4014 rolls through western Pennsylvania on Saturday, July 11, ending its return leg with a stop in Leetsdale. The world's largest operating steam locomotive, No. 4014, is crossing the country for America's 250th birthday; after celebrating July 4 in Philadelphia, it passes back through the Pittsburgh area Saturday, July 11, and stops in Leetsdale before heading home west. - KDKA: https://www.cbsnews.com/pittsburgh/news/big-boy-leetsdale-western-pennsylvania-how-to-see/ SPORTS ---------------------------------------------------------------- Pirates (47-47) Thu Jul 9 · Braves 10 · Pirates 5 · Final Mike Yastrzemski hits grand slam in Braves' 10-5 win over Pirates https://plaintextsports.com/mlb/2026-07-09/atl-pit Up Next · Brewers @ Pirates · Fri Jul 10, 6:40 PM https://plaintextsports.com/mlb/2026-07-10/mil-pit Around the Teams: * Porter Jr. Eyes a Big Cornerback Payday Latest developments: A Post-Gazette report examined how much the Steelers might pay cornerback Joey Porter Jr. as he seeks an extension in a booming market. Measured against recent deals for corners such as Devon Witherspoon and Christian Gonzalez, Porter, the Steelers' 2023 first-round pick, is positioned to chase a lucrative extension, and the paper weighed how far Pittsburgh will go before training camp opens. - Post-Gazette Steelers: https://www.post-gazette.com/sports/steelers/2026/07/10/porter-contract-extension-cornerback-nfl-offseason-witherspoon-gonzalez/stories/202607100048 * Inside the Pirates' Draft of Konnor Griffin Latest developments: The Post-Gazette detailed how the Pirates landed shortstop Konnor Griffin in the MLB Draft, drawing on general manager Ben Cherington. The account traces how Pittsburgh secured the prized prospect ahead of the White Sox and Nationals; Griffin, now a rookie, has fought through injuries this season, including a jammed finger that could sideline him until September. - Post-Gazette Pirates: https://www.post-gazette.com/sports/pirates/2026/07/10/konnor-griffin-mlb-draft-cherington-whitesox-nationals/stories/202607090056 Team USA: * USMNT Turns to the 2030 Cycle Latest developments: The Guardian mapped the U.S. men's national team's next three years, flagging sporting director Matt Crocker's abrupt exit for a club job and a pending contract-extension offer to coach Mauricio Pochettino. After the home World Cup ended in a 4-1 round-of-16 loss to Belgium, the United States enters the 2030 cycle facing roster turnover, an unresolved Pochettino decision, and Crocker's departure, with qualifying, the Gold Cup, and Copa América ahead. - Guardian World Cup 2026: https://www.theguardian.com/football/2026/jul/10/usmnt-world-cup-qualifying-gold-cup-copa-america * Pulisic's World Cup Under Scrutiny Latest developments: ESPN weighed whether Christian Pulisic deserves the blame after his home World Cup fell flat. Pulisic, the Milan forward and the U.S. team's biggest star, struggled through the tournament on home soil and left the round-of-16 loss to Belgium with a leg fracture, and ESPN's post-mortem asks how much of the failure lands on him. - ESPN Soccer: https://www.espn.com/soccer/story/_/id/49317008/instead-being-usmnt-biggest-world-cup-star-pulisic-was-biggest-mystery READING ---------------------------------------------------------------- * Ed Zitron -- Premium: The Hater's Guide To The Memory Crisis Zitron turns a skeptic's eye on the AI industry's push into persistent 'memory' features, dissecting the hype and the technical and business shortcomings behind it. https://www.wheresyoured.at/premium-the-haters-guide-to-the-memory-crisis/ * Stratechery -- Muse Image, Grok 4.5, Alex Karp on CNBC Ben Thompson argues the fight over verifiable data increasingly defines the AI race, running from Meta to Grok to the frontier labs. https://stratechery.com/2026/muse-image-grok-4-5-alex-karp-on-cnbc/ * Cal Newport -- Beware of Productivity Paradoxes Newport uses the personal computer's uneven record to warn that powerful new tools, artificial intelligence included, often fail to deliver the productivity gains they seem to promise. https://calnewport.com/beware-of-productivity-paradoxes/ MARKETS (weekly average, change vs prior week) ---------------------------------------------------------------- S&P 500 7,510.17 ▲ +1.1% Dow 52,743.39 ▲ +1.2% Nasdaq 25,970.01 ▲ +0.9% WTI crude 70.66 ▲ +0.9% EUR/USD 1.1428 ▲ +0.2% GBP/USD 1.3382 ▲ +0.9% USD/JPY 162.16 ▲ +0.1% ================================================================ Generated 2026-07-10 16:07 EDT. Sources: 24 security feeds; 9 Pittsburgh feeds; 4 Pittsburgh arts and events feeds; 6 Pittsburgh sports beat and podcast feeds; 4 Team USA feeds; the Wall Street Journal, the Economist, and the Financial Times; and Ed Zitron, Stratechery, Cal Newport. Markets from Yahoo Finance, weather from the NWS, scores from ESPN. Summaries are AI-generated from the linked reporting; verify at the sources. ================================================================